$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa File: ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa (raw, json) Hash identifier: oAmUkAatH8jb8/BPdlUJQi4w1qbnwzs/grJiCquhZAo= Subject key identifier: 35:E3:DA:BA:F8:D0:7E:D6:A5:AD:11:0E:8B:25:41:B8:EE:24:B4:42 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021AA43FEA1195C7CD3200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 65.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1a:a4:3f:ea:11:95:c7:cd:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=972ad104-52b3-4933-acb2-84be6d556e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:40:ad:c0:e0:81:11:e6:be:64:f5:b7:46:82: 97:c4:dc:21:40:d4:95:e4:b2:a6:68:de:02:36:e9: d9:de:82:34:3c:44:7b:e5:83:4c:21:d8:40:51:37: cc:2c:93:96:e0:e5:da:aa:01:05:1e:1c:35:51:c5: 4f:aa:0d:e6:af:9b:5b:cc:84:2b:1b:73:11:74:4d: 3d:5e:6a:10:8c:e6:82:25:62:a4:6d:c2:5e:9f:c4: 69:3d:c4:67:8b:41:33:16:fe:4d:bd:56:40:20:5b: 1c:7a:5c:30:c0:db:88:2b:62:10:49:a0:58:41:fb: ff:9c:3f:4e:a3:20:4d:6e:cc:f4:92:2c:a3:e0:a8: b7:ab:58:c3:53:97:0c:43:fc:66:8b:04:39:b4:8b: 05:b6:cb:17:f4:4f:e9:5b:6b:e5:49:45:2c:04:af: b6:76:75:8c:53:53:47:a5:ca:cb:f8:2d:f4:06:7a: fa:54:52:d0:74:59:f3:e9:69:6b:fe:1b:0c:79:25: 71:9d:a5:c1:3a:81:1e:84:a5:8c:ac:2e:c9:58:79: 81:0d:58:ce:bf:df:bf:46:b6:7d:f7:08:3f:fb:b1: 36:c1:d0:85:3b:0b:23:cf:21:a9:13:4b:4d:cb:b7: 21:74:10:9f:ee:76:d2:ca:3a:19:4f:66:66:58:21: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E3:DA:BA:F8:D0:7E:D6:A5:AD:11:0E:8B:25:41:B8:EE:24:B4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ddb22382-0f2b-3a7f-bc57-268f8b25a997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:57:8e:50:e1:94:c2:18:1a:d1:46:1c:12:23:df:8d:83:f2: f2:bd:bc:42:5a:1b:83:3b:a7:44:8d:5a:f6:a7:3b:6b:31:34: 2b:81:3d:e4:c5:60:2f:71:27:8d:05:fe:dc:45:4a:f2:b0:91: 69:95:f4:aa:c0:d4:d5:41:6f:67:74:e6:53:01:cd:53:56:0a: ec:04:0e:2e:0f:6b:4b:63:5a:29:3b:5c:be:7c:00:7c:fe:f5: cb:44:cd:49:d6:90:c6:bf:21:3c:9a:16:4f:8e:b0:70:92:a5: cb:22:cb:3e:e8:4e:14:94:86:de:0e:70:56:ee:c4:cb:22:45: e7:c8:d8:d6:f2:6e:1e:a8:f3:ea:29:60:69:7f:29:f8:ae:74: 8f:65:99:80:a9:24:b7:8c:c7:f7:bd:be:d1:c1:e9:66:93:b8: 16:10:a6:5a:3d:53:5c:bf:03:08:f0:2a:63:83:97:d0:90:30: ea:30:dd:18:78:72:45:d3:4e:36:b9:33:95:28:5f:04:fc:0d: eb:e8:7e:62:ef:97:c9:c0:94:c3:52:d1:2b:04:21:98:40:5d: 9b:db:1c:6e:5e:48:d5:78:58:60:90:75:60:af:88:f4:ab:92: a3:ac:57:8f:30:e8:9e:70:f3:ff:6b:63:58:28:4b:6b:6f:6b: e6:c2:2d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhqkP+oRlcfNMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTcyYWQxMDQtNTJiMy00OTMzLWFjYjItODRiZTZkNTU2ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkECtwOCBEea+ZPW3RoKXxNwhQNSV5LKmaN4C NunZ3oI0PER75YNMIdhAUTfMLJOW4OXaqgEFHhw1UcVPqg3mr5tbzIQrG3MRdE09 XmoQjOaCJWKkbcJen8RpPcRni0EzFv5NvVZAIFscelwwwNuIK2IQSaBYQfv/nD9O oyBNbsz0kiyj4Ki3q1jDU5cMQ/xmiwQ5tIsFtssX9E/pW2vlSUUsBK+2dnWMU1NH pcrL+C30Bnr6VFLQdFnz6Wlr/hsMeSVxnaXBOoEehKWMrC7JWHmBDVjOv9+/RrZ9 9wg/+7E2wdCFOwsjzyGpE0tNy7chdBCf7nbSyjoZT2ZmWCGtJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXj2rr40H7Wpa0RDoslQbjuJLRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGRiMjIzODItMGYyYi0z YTdmLWJjNTctMjY4ZjhiMjVhOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRalMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1XjlDhlMIYGtFGHBIj342D8vK9vEJaG4M7p0SNWvanO2sxNCuBPeTF YC9xJ40F/txFSvKwkWmV9KrA1NVBb2d05lMBzVNWCuwEDi4Pa0tjWik7XL58AHz+ 9ctEzUnWkMa/ITyaFk+OsHCSpcsiyz7oThSUht4OcFbuxMsiRefI2Nbybh6o8+op YGl/KfiudI9lmYCpJLeMx/e9vtHB6WaTuBYQplo9U1y/AwjwKmODl9CQMOow3Rh4 ckXTTja5M5UoXwT8DevofmLvl8nAlMNS0SsEIZhAXZvbHG5eSNV4WGCQdWCviPSr kqOsV48w6J5w8/9rY1goS2tva+bCLYI= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:21 2025 by rpki-client